Comment by hales

This will not work if ISPs redirect DNS queries. Only the methods CAP_NET_ADMIN mentioned will work.